Sophos

Troj/KillProc-E

Aliases
  • Trojan.Win32.Killav.br
  • ProcKill-BM
  • Win32/KillAV.BR
  • Trojan.KillAV
  • TROJ_KILLAV.BR
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Protection available since 13 January 2005 14:46:31 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/KillProc-E is a Trojan program used to terminate processes related to various anti-virus and security software programs.

Troj/KillProc-E may be launched by Troj/Multidr-BN with the filename mserv.exe to the Windows folder.

Once executed, Troj/KillProc-E establishes a background service called ANEM that terminates the following list of processes:

AVGCC32.EXE
AVGCTRL.EXE
AVGSERV.EXE
AVXMONITOR9X.EXE
AVXMONITORNT.EXE
AVXQUAR.EXE
Claw95.exe
Claw95cf.exe
F-AGNT95.EXE
ICLOADNT.EXE
ICSUPP95.EXE
NavLu32.exe
Navw32.exe
NORMIST.EXE
Nupgrade.exe
NVC95.EXE
PERSFW.EXE
SPYXX.EXE
SWNETSUP.EXE
SymProxySvc.exe
SYNMGR.EXE

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer